Avoid clear text passwords in SAP OAuth2 Calls in commerce adapter

User and userGroup that can be passed to the preview token service are configurable. By default the property hybris.previewTokenUser is set to "anonymous". If you do not want any user to be passed for preview tickets, just configure hybris.previewTokenUser and leave it blank.

(CMS-15815)